CVE-2024-0055

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

• CWE-155

• https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdfVendor Advisory
• https://www.axis.com/dam/public/c4/00/c5/cve-2024-0055-en-US-432117.pdfVendor Advisory

Published

Mar 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0049In multiple locations, there is a possible out of bounds wri…7.8
• CVE-2024-0050In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a…7.8
• CVE-2024-0051In onQueueFilled of SoftMPEG4.cpp, there is a possible out o…7.8
• CVE-2024-0052In multiple functions of healthconnect, there is a possible …3.3
• CVE-2024-0053In getCustomPrinterIcon of PrintManagerService.java, there i…3.3
• CVE-2024-0054Sandro Poppi, member of the AXIS OS Bug Bounty Program, has …6.5
• CVE-2024-0056Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data …8.7
• CVE-2024-0057NET, .NET Framework, and Visual Studio Security Feature Bypa…9.8
• CVE-2024-0066Johan Fagerström, member of the AXIS OS Bug Bounty Program, …5.3
• CVE-2024-0067Marinus Pfund, member of the AXIS OS Bug Bounty Program, ha…4.3
• CVE-2024-0068Improper Link Resolution Before File Access ('Link Following…7.1
• CVE-2024-0069Rejected reason: This CVE ID was unused by the CNA.